Hello, I was hardening the security of my windows server and i read the
document about MSDTC that if you don't need it then disable. And this is
exactly what I did. I stopped and disabled MSDTC service. And then i removed
Anonymous Logon & Everyone permisson (Local Access & Remote Access) under
component service for COM security.

I restarted the server, logged in as Administrator and got access denied to
most of the tasks such as creating users or adding users to group. The worst
thing is that i can't even Right-Click on any object to check the properties.
I tried to bring back the permission on the COM security but failed as I’m
getting access denied though I’m logged in as administrator. Tried to restart
MSDTC service but unsuccessful because i can't even right-Click on it.

The event log is showing the following error. I can't read the detail
message since right-click is not working. so I’m posting the basic errors.

System Logs:

LsaSrv --> Event ID 40960
Datascrn--> Event ID 3

Application Logs:

SRMSVC--> Event ID 8203
USERENV--> Event ID 1110
USERENV--> Event ID1090
ccsetmgr--> Event ID 48
Event System--> Event ID 4609
COM+ --> Event ID 4691

Does any one know how can i reset the COM Security permission and restart
the MSDTC service? Any suggestions will be appreciated.

Thanks

Hello Asad,

If you have a system state backup you are lucky, otherwise....

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello, I was hardening the security of my windows server and i read
> the document about MSDTC that if you don't need it then disable. And
> this is exactly what I did. I stopped and disabled MSDTC service. And
> then i removed Anonymous Logon & Everyone permisson (Local Access &
> Remote Access) under component service for COM security.
>
> I restarted the server, logged in as Administrator and got access
> denied to most of the tasks such as creating users or adding users to
> group. The worst thing is that i can't even Right-Click on any object
> to check the properties. I tried to bring back the permission on the
> COM security but failed as I'm getting access denied though I'm logged
> in as administrator. Tried to restart MSDTC service but unsuccessful
> because i can't even right-Click on it.
>
> The event log is showing the following error. I can't read the detail
> message since right-click is not working. so I'm posting the basic
> errors.
>
> System Logs:
>
> LsaSrv --> Event ID 40960
> Datascrn--> Event ID 3
> Application Logs:
>
> SRMSVC--> Event ID 8203
> USERENV--> Event ID 1110
> USERENV--> Event ID1090
> ccsetmgr--> Event ID 48
> Event System--> Event ID 4609
> COM+ --> Event ID 4691
> Does any one know how can i reset the COM Security permission and
> restart the MSDTC service? Any suggestions will be appreciated.
>
> Thanks
>